report
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted tool outputs and session findings to generate a report, presenting an attack surface for indirect prompt injection.
- Ingestion points: Processes results and summaries from tool outputs and session findings (SKILL.md).
- Boundary markers: No specific delimiters or instructions to ignore embedded commands are defined to separate ingested data from report logic.
- Capability inventory: Possesses file-write capability to create a markdown report file in the project root.
- Sanitization: No sanitization, escaping, or validation logic is specified for the content synthesized from tool outputs.
Audit Metadata